merchant update password